Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
File: a-SeWhSwy_QQTANLVyoPnxVKmXU.mft (raw, json)
Hash identifier: ENpX9JvfOLYz6eIYwXfVcZL8uhYYJ9THkmXmXxb6jVc=
Subject key identifier: C4:D9:ED:A7:DF:5A:F4:F2:8B:C7:9B:ED:83:5F:67:CB:0B:A2:D2:A5
Authority key identifier: 6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
Certificate issuer: /CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Certificate serial: 019A725C5CE6FD034B844B35682EB9B4E8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
Manifest number: 05C4
Signing time: Tue 11 Nov 2025 10:00:46 +0000
Manifest this update: Tue 11 Nov 2025 10:00:46 +0000
Manifest next update: Wed 12 Nov 2025 10:00:46 +0000
Files and hashes: 1: a-SeWhSwy_QQTANLVyoPnxVKmXU.crl (hash: ox0MWGmIFqAQWQwrYqeaPKuk7r7KJlhgyqTjblLr+FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5c:e6:fd:03:4b:84:4b:35:68:2e:b9:b4:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Validity
Not Before: Nov 11 10:00:46 2025 GMT
Not After : Nov 12 10:00:46 2025 GMT
Subject: CN=c4d9eda7df5af4f28bc79bed835f67cb0ba2d2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:22:93:a3:96:05:2d:dc:83:34:e0:c0:65:
fb:a1:5b:5f:7d:67:e1:a0:4d:92:2e:99:f7:f7:0c:
14:94:11:0a:3e:51:b0:1f:03:07:42:e2:6b:0c:08:
4d:5c:e8:98:8d:08:5e:97:47:fd:7b:04:ad:eb:c6:
ea:bb:d2:45:15:33:ed:b3:c7:de:11:a3:c9:93:b6:
dc:f3:9f:ad:c2:8d:1f:52:b7:4a:d1:47:8f:9f:ed:
0d:e3:63:5b:c1:a1:b5:a7:c0:e1:7f:2c:95:47:49:
90:1e:c8:a1:fb:dc:06:a9:f7:ed:e3:63:61:13:56:
0d:b2:bb:6b:f1:73:ed:74:cd:24:45:37:97:66:56:
53:f9:ac:2b:23:44:5c:9a:4c:ee:39:aa:ec:83:9f:
ec:ae:1e:01:eb:63:b3:d6:dd:c7:25:49:e6:84:8d:
43:7e:01:60:13:e0:bb:5b:60:5f:4e:c0:cb:47:56:
29:3a:13:29:35:44:37:04:a3:d4:98:f1:ab:0b:ce:
36:2e:36:37:be:2b:d8:6f:32:81:bd:1d:ac:7a:89:
fc:0e:83:bf:e7:3d:6a:44:52:95:9f:48:7c:a4:64:
89:38:f7:5c:d7:9a:83:f7:33:a6:53:ac:39:ad:c7:
38:2b:79:36:87:66:ca:50:a4:9e:f7:9a:22:47:1c:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D9:ED:A7:DF:5A:F4:F2:8B:C7:9B:ED:83:5F:67:CB:0B:A2:D2:A5
X509v3 Authority Key Identifier:
keyid:6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:75:22:4f:8c:ae:1f:23:dc:3b:5f:c4:71:2e:a1:51:cd:
36:01:48:c0:4b:e5:fc:aa:aa:0f:02:c8:d7:8c:19:6d:49:3d:
2a:86:65:e7:75:c1:7c:fa:33:db:fd:84:cf:3d:7d:4f:bb:d9:
fc:08:87:a0:25:9e:ac:b0:be:95:fe:8f:05:5b:50:ca:d1:70:
20:95:9d:ef:ef:d0:8e:01:e4:a1:9e:b5:4a:22:c9:60:e7:bd:
53:a6:55:cf:db:c8:d2:a9:06:9b:fa:67:0f:56:17:5b:e6:88:
ad:d5:ee:27:0f:75:c4:1e:73:1c:76:a8:f1:aa:89:dd:3f:19:
89:e3:29:82:46:55:9f:3d:2a:26:22:9b:09:f6:fe:08:7c:82:
c2:50:b5:38:98:5b:6b:e5:25:e7:3d:49:d8:44:e3:6b:7d:e1:
7d:c7:a1:68:4b:0b:b3:e3:b1:d9:c8:3a:4b:44:20:ba:08:f5:
1f:3a:b1:89:46:73:8b:91:0c:3e:84:63:6b:3b:cc:c8:6d:cc:
61:69:ab:5f:a7:23:8e:6d:6d:a3:da:29:30:b1:9b:d4:ae:67:
6c:7a:c2:cd:46:0a:58:3e:11:f7:38:e1:47:50:bc:f4:d7:36:
56:7f:db:fe:14:06:9d:d6:5e:11:10:8b:43:a8:39:6a:1b:b4:
e9:77:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:39 2025 by rpki-client